$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/7114716A653911EFB61F430DC4F9AE02.roa File: 7114716A653911EFB61F430DC4F9AE02.roa (raw, json) Hash identifier: Jxy+pvv4xysDlIQZeDPDC9SdzrWtHicNhXpYrAxOrBk= Subject key identifier: CB:89:E8:87:FB:BF:12:E4:0A:72:BA:AE:DD:D3:C0:E8:4F:62:47:77 Certificate issuer: /CN=A9137E5F/serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68 Certificate serial: AF Authority key identifier: 83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/7114716A653911EFB61F430DC4F9AE02.roa Signing time: Tue 29 Jul 2025 06:43:02 +0000 ROA not before: Tue 29 Jul 2025 06:43:02 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139003 IP address blocks: 103.168.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E5F, serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68 Validity Not Before: Jul 29 06:43:02 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68886d76-e686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:4e:45:0f:8f:6e:9e:5d:3e:59:5b:9d:1e: c3:76:c5:3b:c9:cd:cb:77:c0:bb:15:ec:d4:fa:f7: 36:ef:a9:06:fc:0c:a2:08:dc:7b:d9:d9:93:4b:aa: 5b:4f:eb:6a:b9:90:8c:82:50:b9:98:0e:2e:34:96: 88:93:50:c1:a7:ca:10:24:8a:01:05:ac:93:3d:6c: b6:36:a3:85:2f:9d:56:0b:8b:77:c7:ac:e2:f3:58: 84:75:38:4d:b6:37:9e:ce:60:c1:b7:be:60:47:8a: 95:92:85:9f:9d:df:60:0a:34:d7:bd:1e:a2:98:52: f6:9b:06:7b:d9:e3:a1:7a:28:7a:3f:55:c3:ba:1f: ba:04:3d:ee:41:03:38:85:59:df:21:a4:c2:0c:0b: aa:3a:ed:21:43:0f:b7:7f:b3:fd:65:56:6a:50:de: 96:fb:71:0f:05:08:f1:55:77:e4:53:8f:bd:68:cf: 07:53:bf:25:6c:30:cf:03:aa:9a:8a:07:99:a6:ca: ef:eb:21:d2:25:90:63:74:1a:c0:08:95:13:aa:01: 81:52:26:74:a2:7d:ee:5c:0d:a1:71:92:17:b3:02: c4:55:dd:0f:e3:54:e5:8a:0f:f3:37:84:9d:dd:80: 41:7a:72:da:c9:57:60:de:8f:c7:6a:2d:a9:d9:36: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:89:E8:87:FB:BF:12:E4:0A:72:BA:AE:DD:D3:C0:E8:4F:62:47:77 X509v3 Authority Key Identifier: keyid:83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/7114716A653911EFB61F430DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.220.0/23 Signature Algorithm: sha256WithRSAEncryption 23:07:e1:55:3b:ae:5b:52:72:0a:61:be:fe:b3:db:c8:30:31: f6:90:5b:fe:1e:a9:e2:f3:70:54:ea:3e:af:83:c3:ff:73:70: 03:39:65:17:2c:8a:64:ae:f1:39:e6:ac:46:e4:d1:8d:7c:8d: c4:16:f7:97:6a:21:72:b1:7e:05:95:52:81:14:17:07:38:23: 23:30:74:cd:9d:45:30:d1:20:5e:89:12:b7:0f:4d:99:6b:e8: e0:8d:bd:4a:95:a7:88:db:3d:51:4a:ed:99:c6:b7:d9:c5:a9: 28:bb:0c:4c:67:f1:98:c3:2c:35:a9:94:5f:c1:ee:36:23:2a: 13:1b:3c:68:dd:38:b4:91:2d:2d:50:02:2d:c8:75:e1:88:4d: 40:c3:c0:68:e3:7c:62:5f:12:60:4c:be:47:f7:9f:92:5c:e0: 8b:3c:81:c6:0b:87:94:3e:e6:7e:0c:71:75:33:0e:56:04:ee: 9e:49:37:cc:37:c8:d9:58:f3:48:4b:32:17:a5:1f:39:95:ae: b6:f9:86:62:3d:9d:ee:eb:66:dc:ce:a3:6c:1a:54:24:68:42: bc:cd:25:31:f6:51:89:40:fb:79:eb:0d:ad:9b:8e:09:ef:cb: 93:ec:98:18:22:ac:d4:76:3a:6e:47:90:d1:88:61:5c:c2:b3: 4c:45:e3:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFNUYxMTAvBgNVBAUTKDgzQzJCNTRCNjQxRTNGRjA2RTMxQTJCNDQ1MEMxNTdB REFENTlCNjgwHhcNMjUwNzI5MDY0MzAyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg4NmQ3Ni1lNjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthBORQ+Pbp5dPllbnR7DdsU7yc3Ld8C7FezU+vc276kG/AyiCNx72dmTS6pb T+tquZCMglC5mA4uNJaIk1DBp8oQJIoBBayTPWy2NqOFL51WC4t3x6zi81iEdThN tjeezmDBt75gR4qVkoWfnd9gCjTXvR6imFL2mwZ72eOheih6P1XDuh+6BD3uQQM4 hVnfIaTCDAuqOu0hQw+3f7P9ZVZqUN6W+3EPBQjxVXfkU4+9aM8HU78lbDDPA6qa igeZpsrv6yHSJZBjdBrACJUTqgGBUiZ0on3uXA2hcZIXswLEVd0P41Tlig/zN4Sd 3YBBenLayVdg3o/Hai2p2TbJzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMuJ6If7 vxLkCnK6rt3TwOhPYkd3MB8GA1UdIwQYMBaAFIPCtUtkHj/wbjGitEUMFXra1Zto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U1Ri84MEM0QjMwMDY1 MzgxMUVGOEI0Njg5NkVDNEY5QUUwMi9nOEsxUzJRZVBfQnVNYUswUlF3VmV0clZt MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4SzFTMlFlUF9CdU1hSzBSUXdWZXRyVm0yZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdFNUYvODBDNEIzMDA2NTM4MTFFRjhCNDY4OTZFQzRGOUFFMDIvNzExNDcxNkE2 NTM5MTFFRkI2MUY0MzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqNwwDQYJKoZIhvcNAQELBQADggEBACMH4VU7rltScgph vv6z28gwMfaQW/4eqeLzcFTqPq+Dw/9zcAM5ZRcsimSu8TnmrEbk0Y18jcQW95dq IXKxfgWVUoEUFwc4IyMwdM2dRTDRIF6JErcPTZlr6OCNvUqVp4jbPVFK7ZnGt9nF qSi7DExn8ZjDLDWplF/B7jYjKhMbPGjdOLSRLS1QAi3IdeGITUDDwGjjfGJfEmBM vkf3n5Jc4Is8gcYLh5Q+5n4McXUzDlYE7p5JN8w3yNlY80hLMhelHzmVrrb5hmI9 ne7rZtzOo2waVCRoQrzNJTH2UYlA+3nrDa2bjgnvy5PsmBgirNR2Om5HkNGIYVzC s0xF4zE= -----END CERTIFICATE-----Generated at Wed Aug 13 02:59:44 2025 by rpki-client